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IN THE CLAIMS: 

Amended claims follow: 

1 . (Currently Amended) A method for responding to a virus alert, the virus alert 
containing information pertaining to a new virus, the method comprising: 

receiving the virus alert; 

assessing a risk level associated with the new virus ^tho risk level indicating a risk 
of relativ e ly significant damag e cau s ed by an infection of th e n e w virus on a comput e r 
s yst e m ^ the assessing including: obtaining information associated with at least one 
previous virus which has caused a previous infection on a computer system, and 
comparing the information pertaining to the new virus with the information associated 
with the previous virus which has caused the previous infection on the computer system : 
and 

obtaining a program code whe nbased on the risk level ; indicates that the new 
vims may pos e a significant risk of relatively significant damage on the comput e r syst e m, 
th e program cod e- being configured to substantially combat th e n e w virus 

wherein the previous virus and the new virus are of a first type, and the 
information associated with the previous virus which has caused the previous infection on 
the computer system includes data associated with a duration of the previous infection 
and a scope of the previous infection . 

2. (Cancelled) 

3. (Cancelled) 

4. (Currently Amended) The method as recited in claim $1 wherein when the 
previous infection has a relatively long duration and a relatively significant scope, the 
risk level indicates that the new virus may pose thea significant risk of r e lativ el y 
significant damage on the computer syst e m . 
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5. (Currently Amended) The method as recited in claim 21 wherein the information 
associated with the previous virus which has caused the previous infection on the 
computer system is stored in a profile on a database associated with the computer system. 

6. (Original) The method as recited in claim 1 wherein the virus alert is received 
from an anti-virus information source. 

7. (Original) The method as recited in claim 6 wherein the virus alert is 
automatically received from the anti-virus information source. 

8. (Original) The method as recited in claim 7 wherein receiving the virus alert 
includes acquiring the virus alert from the anti-virus information source. 

9. (Original) The method as recited in claim 1 wherein the computer system is a 
computer network, the computer network including a plurality of computing devices. 

10. (Currently Amended) A computer program product responding to a virus alert, the 
virus alert being arranged to provide information pertaining to a new virus, the computer 
program product comprising; 

computer code for receiving the virus alert; 

computer code for assessing a risk level associated with the new virus , the risk 
l e v e l indicating a ri s k of asignificant n e w inf e ction by the n e w virus on a computer 
s y s t e m , the assessing including: obtaining information associated with at least one 
previous virus which has caused a previous infection on a computer system, and 
comparing the information pertaining to the new virus with the information associated 
with the previous virus which has caused the previous infection on the computer system ; 

computer code for obtaining program code whe abased on the risk level indicates 
that th e n e w viru s may pose a significant risk of the significant n e w inf e ction on th e 
computer system, the program cod e being configur e d to s ub s tantially combat the now 
virus ; and 

a computer-readable medium that stores the computer codes; 
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wherein the previous virus and the new virus are of a first type, and the 
information associated with the previous virus which has caused the previous infection on 
the computer system includes data associated with a duration of the previous infection 
and a scope of the previous infection . 

11. (Cancelled) 

12. (Cancelled) 

13. (Original) The computer program product as recited in claim 10 wherein the 
computer-readable medium is one selected from the group consisting of a hard disk, a 
CD-ROM, a DVD, a computer disk, a tape drive, a computer memory, and a data signal 
embodied in a carrier wave. 

14. (Currently Amended) A computer system suitable for responding to a virus alert, 
the virus alert being providing information pertaining to a new virus, the computer 
system comprising: 

computer code for receiving the virus alert; 

computer code for assessing a risk level associated with the new virus , th e risk 
level boing arrang e d to indicat e a risk of a relatively significant infection by th e n e w 
viru s on the computer syst e m , the assessine including: obtaining information associated 
with at least one previous virus which has caused a previous infection on the computer 
system, and comparing the information pertaining to the new virus with the information 
associated with the previous virus which has caused the previous infection on the 
computer system ; 

computer code for obtaining code whe nbased on the risk level indicates that the 
new virus may pos e a s ignificant risk of th e r e lativ e ly significant infection on th e 
Gomput e r s ystem, the code b e ing configured to substantially combat the new virus ; 

a computer-readable medium that stores the computer codes; and 

a processor that executes the computer codes; 
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wherein the previous virus and the new virus are of a first type, and the 
information associated with the previous virus which has caused the previous infection on 
the computer system includes data associated with a duration of the previous infection 
and a scope of the previous infection . 

15. - 56. (Cancelled) 

57. (New) The computer program product as recited in claim 10 wherein when the 
previous infection has a long duration and a relatively significant scope, the risk level 
indicates that the new virus may pose a significant risk. 

58. (New) The computer program product as recited in claim 10 wherein the 
information associated with the previous virus which has caused the previous infection on 
the computer system is stored in a profile on a database associated with the computer 
system. 

59. (New) The computer program product as recited in claim 10 wherein the virus 
alert is received from an anti-virus information source. 

60. (New) The computer program product as recited in claim 59 wherein the virus 
alert is automatically received from the anti-virus information source. 

61 . (New) The computer program product as recited in claim 60 wherein receiving 
the virus alert includes acquiring the virus alert from the anti-virus information source. 

62. (New) The computer program product as recited in claim 10 wherein the 
computer system is a computer network, the computer network including a plurality of 
computing devices. 

63. (New) The computer system as recited in claim 14 wherein when the previous 
infection has a long duration and a relatively significant scope, the risk level indicates 
that the new virus may pose a significant risk. 
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64. (New) The computer system as recited in claim 14 wherein the information 
associated with the previous virus which has caused the previous infection on the 
computer system is stored in a profile on a database associated with the computer system. 

65. (New) The computer system as recited in claim 14 wherein the virus alert is 
received from an anti-virus information source. 

66. (New) The computer system as recited in claim 65 wherein the virus alert is 
automatically received from the anti-virus information source. 

67. (New) The computer system as recited in claim 66 wherein receiving the virus 
alert includes acquiring the virus alert from the anti-virus information source. 

68. (New) The computer system as recited in claim 14 wherein the computer system 
is a computer network, the computer network including a plurality of computing devices. 
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